Paper Info
Title
Fine-Grained Access Control Via Xacml Policy Optimization In Cloud Computing
Abstract
One primary challenge of enforcing access control in cloud computing is how to ensure access with high efficiency while preserving data security. This paper proposes a fine-grained access control method for cloud resources. The basic idea is to use XACML as access control language and to optimize policies by data fragmentation and policy refinement algorithms. Through data fragmentation, the accessible resources are divided into disjoint data blocks, and each of them will be combined with a set of policy rules. This helps to refine the policy and to avoid data leakage caused by rule conflicting on the resource intersections. Finally, the disjoint data blocks and the optimized policy are distributed in the three-layered cloud, and the decision to a request is made by rule matching on a specific resource rather than traversing the whole policy rules. Experiments show that our proposal enjoys higher efficiency in cloud-based access control.
Year
DOI
Venue
2015
10.1142/S0218194015710047
INTERNATIONAL JOURNAL OF SOFTWARE ENGINEERING AND KNOWLEDGE ENGINEERING
Keywords
Field
DocType
Access control, policy optimization, data fragmentation, XACML, cloud computing
Data mining,Data security,Disjoint sets,Computer science,XACML,Fragmentation (computing),Rule matching,Access control,Cloud computing,Traverse
Journal
Volume
Issue
ISSN
25
9-10
0218-1940
Citations 
PageRank 
References 
0
0.34
6
Authors
3
Name
Order
Citations
PageRank
Xin Pei1121.98
Huiqun Yu219136.27
Guisheng Fan39125.45